VULNERABILITY INTELLIGENCE
CVE-2024-25944
CVSS score5.7 MEDIUM
EPSS probability0.77%
CISA KEVNot currently listed
Published2024-03-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, to gain unauthorized access to the files stored on the server filesystem, with the privileges of the running web application.
Weakness classification
- security_alert@emc.com: CWE-23
- nvd@nist.gov: CWE-22
Primary references
- security_alert@emc.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory